last executing test programs: 3m19.396847295s ago: executing program 2 (id=680): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="6400000004060104000000000000000002000004050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x44080) 3m19.354939827s ago: executing program 2 (id=681): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_mr_vif\x00') read$eventfd(r0, &(0x7f0000000180), 0x8) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$P9_RREADLINK(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mknodat(r0, &(0x7f00000005c0)='./file0\x00', 0x200, 0x1498) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x18, 0x4, 0x0, 0x0, 0x1, 0x1}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000280)=0x3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x98, 0x1, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x2c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x3, 0x8}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x6}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x2, 0x40}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0xff}]}}, @CTA_FILTER={0x4c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc1}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x217}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xa80}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xa61}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x80}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xb0f}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xa04}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x240000c0) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r6, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00!', 0x2}], 0x1, 0x6, 0x6) 3m18.800410591s ago: executing program 2 (id=688): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) umount2(&(0x7f0000000000)='./file0\x00', 0x9) 3m18.749706803s ago: executing program 2 (id=689): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x400, &(0x7f00000004c0)={[{@fat=@quiet}, {@nodots}, {@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x401}}, {@dots}]}, 0x1, 0x233, &(0x7f0000000ac0)="$eJzs3cFqE1EUBuBjm7ahG7sWFwNuXAX1DQapIA4IkVnoyoHqphVhuhndmMfwGXwkH6Or7kbshKSN0YVmvA3zfRDmh5/AuZvcLO5N3t7/cHry8fx9+/1rjMdZjCJmcRlxFDuxG5078+fOVd6P62YBAGyb6bTKU89Av+o6r/Yi4uCXpvyWZCAAAAAAAAAAAAD+mfP/ADA8f3v+/8vmR6EndZ1Xh/Pvbzc5/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACkc9m2d9s/vFLPBwBsnv0fAIbH/g8Aw2P/B4DhefX6zYu8KI6nWTaOuJg1ZVN2z65/9rw4fpRdOVq+66Jpyt1F/7jrs5v9XhzO+ydr+/14+KDrf3ZPXxYr/UGc9L98AAAAAAAAAAAAAAAAAAAAuBUm2cLa+/2Tye/6Ll37fYCV+/ujuDf6b8sAAAAAAAAAAAAAAAAAAACArXb+6fNpdXb2rhYEQViE1J9MAAAAAAAAAAAAAAAAAAAwPMtLv6knAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB0lv//319IvUYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgGH4EAAD//0QWlE8=") r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 3m17.871627551s ago: executing program 2 (id=699): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x40}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x40}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="070000000400000000020000db21000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000400", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') preadv(r2, &(0x7f0000000dc0)=[{&(0x7f00000007c0)=""/59, 0x3b}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f00000009c0)=""/159, 0x9f}, {&(0x7f0000000a80)=""/227, 0xe3}, {&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/140, 0x8c}, {&(0x7f0000000e80)=""/63, 0x3f}, {&(0x7f0000000c40)=""/16, 0x10}, {&(0x7f0000000c80)=""/225, 0xe1}, {&(0x7f0000000d80)=""/8, 0x8}], 0xa, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9dfd) set_mempolicy(0x3, &(0x7f0000000040)=0x5, 0x8) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSBRK(r3, 0x5427) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xc9, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) 3m17.533097736s ago: executing program 2 (id=705): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x7fe2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r4}, 0x18) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x2931890e, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000002200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ustat(0x9, &(0x7f0000000000)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x480, 0x30, 0xc96f2b0dc02612b1, 0x71bd2b, 0x25dfdbff, {}, [{0x358, 0x1, [@m_csum={0xd8, 0x19, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x8000, 0xffffffffffffffff, 0xb8b8, 0x3}, 0x65}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7f, 0x4, 0x6, 0x1000, 0x101}, 0x37}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x1, 0xfffffffffffffff9, 0x9, 0x80000001}, 0x14}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x274bcf77, 0x5, 0x6, 0x8, 0x101}, 0x7d}}]}, {0x39, 0x6, "99599a989bd1b1fba50a4a29ffa7c682e6cfa07125a1335f6cc53bfcbdd0cec4b739e8072ad58b5153a6189bec7e227f7f9f2cb5c1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbedit={0xc4, 0xa, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xb0e}]}, {0x8d, 0x6, "827cfc3c97533b7fd85b8f8fc505a863ca8f9e20a40133a88637f87f05b88171edad7365a25c16de383004673eee493e6bc8e65e14cb7c4c40505904e9bd738809a5de6875a609fc4d328a141abfce4fb1dd738c84aada34cdaf4b8cf6379acc343533215412508b1faa1da28903c894dc3b2828e6ddb221934961a0c35e67cc611dcd10cb3d9e85e6"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x138, 0x1, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}]}, {0xf5, 0x6, "6924a3156352d4cb671a82481f27291343a36577586e5138f9b60a47ff29c9048eb534a11a1a6e4068a3f14dbbb6f779cad02630f9c416662a272922c0177770deb39f4690d4395dd3771d99f9aae01ac5b8b77c9ea5267b51cceebad4126c6b018ccd2424755e23161a50ec4588a35b167651bd8e886d43c7b0f2105fe0bbf48e50295c1b6016c72500582f399eea553274e9ce77781e0bd18c6dd6dfed7fc2ce76e1b76fcd7a3c44f38f1f3f7b49477ea4bce06e49ae2024ef8fae1604236b87fa523248ff34da3a7feb0b33e3daf741eaf0028a3028cadff8319f24f3fcf384b8ebc5d6acc0a15408058408ac4ec371"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_bpf={0x80, 0x0, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x2, 0x4, 0x6, 0x4}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x19, 0x6, "12df59202984a7d58c1b88abb797475ada8903aa97"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x114, 0x1, [@m_nat={0x110, 0x17, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x8, 0x7, 0x3, 0x80000000}, @private=0xa010101, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x3, 0xffffffffffffffff, 0x3, 0x4}, @remote, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x3, 0x2, 0x128, 0x4}, @broadcast, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x3, 0xfce3, 0xf0}, @multicast2, @private=0xa010101, 0xffffffff, 0x10000001}}]}, {0x45, 0x6, "b7e5307681464d8557d780071307f7c6a1d3bec6226e063b395b3cd3cc6acbf3f57c019041a22a7fc6709a114f627684942cab7868f369b56956160b81c6d053c8"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x480}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r10 = socket(0x10, 0x803, 0x0) sendto(r10, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r10, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) flock(r5, 0x5) r11 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r11, 0x1) flock(r11, 0x2) 3m17.532421756s ago: executing program 32 (id=705): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x7fe2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r4}, 0x18) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x2931890e, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000002200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ustat(0x9, &(0x7f0000000000)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x480, 0x30, 0xc96f2b0dc02612b1, 0x71bd2b, 0x25dfdbff, {}, [{0x358, 0x1, [@m_csum={0xd8, 0x19, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x8000, 0xffffffffffffffff, 0xb8b8, 0x3}, 0x65}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7f, 0x4, 0x6, 0x1000, 0x101}, 0x37}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x1, 0xfffffffffffffff9, 0x9, 0x80000001}, 0x14}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x274bcf77, 0x5, 0x6, 0x8, 0x101}, 0x7d}}]}, {0x39, 0x6, "99599a989bd1b1fba50a4a29ffa7c682e6cfa07125a1335f6cc53bfcbdd0cec4b739e8072ad58b5153a6189bec7e227f7f9f2cb5c1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbedit={0xc4, 0xa, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xb0e}]}, {0x8d, 0x6, "827cfc3c97533b7fd85b8f8fc505a863ca8f9e20a40133a88637f87f05b88171edad7365a25c16de383004673eee493e6bc8e65e14cb7c4c40505904e9bd738809a5de6875a609fc4d328a141abfce4fb1dd738c84aada34cdaf4b8cf6379acc343533215412508b1faa1da28903c894dc3b2828e6ddb221934961a0c35e67cc611dcd10cb3d9e85e6"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x138, 0x1, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}]}, {0xf5, 0x6, "6924a3156352d4cb671a82481f27291343a36577586e5138f9b60a47ff29c9048eb534a11a1a6e4068a3f14dbbb6f779cad02630f9c416662a272922c0177770deb39f4690d4395dd3771d99f9aae01ac5b8b77c9ea5267b51cceebad4126c6b018ccd2424755e23161a50ec4588a35b167651bd8e886d43c7b0f2105fe0bbf48e50295c1b6016c72500582f399eea553274e9ce77781e0bd18c6dd6dfed7fc2ce76e1b76fcd7a3c44f38f1f3f7b49477ea4bce06e49ae2024ef8fae1604236b87fa523248ff34da3a7feb0b33e3daf741eaf0028a3028cadff8319f24f3fcf384b8ebc5d6acc0a15408058408ac4ec371"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_bpf={0x80, 0x0, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x2, 0x4, 0x6, 0x4}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x19, 0x6, "12df59202984a7d58c1b88abb797475ada8903aa97"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x114, 0x1, [@m_nat={0x110, 0x17, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x8, 0x7, 0x3, 0x80000000}, @private=0xa010101, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x3, 0xffffffffffffffff, 0x3, 0x4}, @remote, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x3, 0x2, 0x128, 0x4}, @broadcast, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x3, 0xfce3, 0xf0}, @multicast2, @private=0xa010101, 0xffffffff, 0x10000001}}]}, {0x45, 0x6, "b7e5307681464d8557d780071307f7c6a1d3bec6226e063b395b3cd3cc6acbf3f57c019041a22a7fc6709a114f627684942cab7868f369b56956160b81c6d053c8"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x480}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r10 = socket(0x10, 0x803, 0x0) sendto(r10, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r10, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) flock(r5, 0x5) r11 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r11, 0x1) flock(r11, 0x2) 2m4.823091186s ago: executing program 4 (id=1723): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @cgroup_sock=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m4.692768081s ago: executing program 4 (id=1724): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000001300b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc786b409ac930c90ff90f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d858952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09e3187a10d905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367638cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a2d4f12e8e717eaaa2a6d14fee0c15f36c203dbc7c06128bec84231d43e152ef19ce027436fb4ebb9fce431b913f4817597a6f53d1626f9d1cb7b36fb18ac19547a8b20ede70c81a75686cea85dcd34408128da7cab045541bc6b9a0a79f63f2e7646356e04b977c9f47467537015240b974184be9c54b7c628ae4d97ebdb06070344468994afbaac71e5ffac2c61d9af66f9de2760a38e968a781528531c1c936a02065be48f1eee77be878873206d65bd0b1241fab9139abd7f40febe81fed3684e6b59273da01f1743c6a5df300ec59c65e8174fc2d95a62ca7b937289ad14107333007eab833a5849eb19f18ae41743dfb949377e"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac141416441805034d2f87e5940c05ab845013f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 2m4.603672165s ago: executing program 4 (id=1727): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x4000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 2m4.499475349s ago: executing program 4 (id=1729): perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1}, 0xa0, 0x58, 0x0, 0x4, 0x2, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000380)=""/75}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) close(r6) 2m4.434639942s ago: executing program 4 (id=1731): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f80)={0x24, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) 2m3.910077825s ago: executing program 4 (id=1732): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4480, &(0x7f0000000b40)=ANY=[], 0x83, 0x235, &(0x7f0000000280)="$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") 1m48.894070828s ago: executing program 33 (id=1732): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4480, &(0x7f0000000b40)=ANY=[], 0x83, 0x235, &(0x7f0000000280)="$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") 4.050094593s ago: executing program 6 (id=3669): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000004ea4fdffc327cfbc7a6ac53aa87f5c683b8e6c1cfed870a6fe23d3f9adbfabe7988d5e38920d31218840ff28f90237b6f79e91dfd58ac8ee8df1f0caa4262be5927fc60e1274ba9491a7a102bc853d5d8a33ed70487a3bb83b60aaddf0adad085248789e8cba", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7ff}, 0x18) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.386370512s ago: executing program 5 (id=3682): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_mr_vif\x00') read$eventfd(r0, &(0x7f0000000180), 0x8) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$P9_RREADLINK(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mknodat(r0, &(0x7f00000005c0)='./file0\x00', 0x200, 0x1498) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x18, 0x4, 0x0, 0x0, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000280)=0x3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x98, 0x1, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x24, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x3, 0x8}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x2, 0x40}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0xff}]}}, @CTA_FILTER={0x54, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc1}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x217}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xa80}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xa61}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x80}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xb0f}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xa04}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x240000c0) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r6, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00!', 0x2}], 0x1, 0x6, 0x6) 3.138445703s ago: executing program 6 (id=3688): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x80102, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 2.965942571s ago: executing program 6 (id=3693): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x80102, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x308) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000032c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x7, [@enum={0x3, 0x1, 0x0, 0x6, 0x4, [{0x5, 0xffff}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x2e, 0x5f]}}, &(0x7f00000031c0)=""/226, 0x33, 0xe2, 0x1}, 0x28) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) 2.908633293s ago: executing program 5 (id=3695): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7ff}, 0x18) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) sigaltstack(0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.630200835s ago: executing program 3 (id=3700): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) 2.28539679s ago: executing program 1 (id=3705): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xc8, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x2000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-010d \x00'}, 0x20) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37ce}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80"], 0xfdef) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) 2.270980271s ago: executing program 1 (id=3706): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_mr_vif\x00') read$eventfd(r0, &(0x7f0000000180), 0x8) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$P9_RREADLINK(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mknodat(r0, &(0x7f00000005c0)='./file0\x00', 0x200, 0x1498) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x18, 0x4, 0x0, 0x0, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000280)=0x3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x98, 0x1, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x24, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x3, 0x8}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x2, 0x40}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0xff}]}}, @CTA_FILTER={0x54, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc1}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x217}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xa80}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xa61}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x80}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xb0f}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xa04}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x240000c0) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r6, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00!', 0x2}], 0x1, 0x6, 0x6) 2.043373791s ago: executing program 5 (id=3707): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000880), 0x12) 2.030874891s ago: executing program 5 (id=3708): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x400, &(0x7f00000004c0)={[{@fat=@quiet}, {@nodots}, {@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x401}}, {@dots}]}, 0x1, 0x233, &(0x7f0000000ac0)="$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") r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.983948683s ago: executing program 1 (id=3709): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xfff2, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.900182597s ago: executing program 1 (id=3711): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x80102, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x308) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000032c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x7, [@enum={0x3, 0x1, 0x0, 0x6, 0x4, [{0x5, 0xffff}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x2e, 0x5f]}}, &(0x7f00000031c0)=""/226, 0x33, 0xe2, 0x1}, 0x28) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) 1.845810839s ago: executing program 0 (id=3712): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000005c40), 0x403f, 0x0) 1.761966373s ago: executing program 3 (id=3713): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}}], 0x1, 0x0) sendmmsg$unix(r3, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}}], 0x1, 0x0) 1.724699574s ago: executing program 3 (id=3714): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r4, &(0x7f00000000c0), 0x12) 1.615786659s ago: executing program 0 (id=3715): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @cgroup_sock=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.581560751s ago: executing program 3 (id=3716): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x80420d0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x100fb8, 0x6, 0x0, 0x1, 0x8, 0x20004, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200), 0x1, 0x257, &(0x7f0000000ac0)="$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") pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYRES8], 0x39) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000a40)='ext4_da_write_pages\x00', 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x29, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000005c0), 0x6e, &(0x7f0000000700)=[{&(0x7f0000000880)=""/210, 0xd2}], 0x1, &(0x7f0000000980)=[@cred={{0x1c}}], 0x20}, 0x0) 1.537820953s ago: executing program 6 (id=3717): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000000306050000000100000000000100004a05000100070000000900020073797a3200000000"], 0x28}, 0x1, 0x0, 0x0, 0x40841}, 0x4) 1.503860094s ago: executing program 0 (id=3718): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="2d63707520fd5c990cae77c84b67f55ae7b450112319bfd989393f3bf53d639a77b84c28fce32f239fc6577dafdb2511010b31d8f4b6abc9aabfffa6a8ea"], 0x5) r6 = openat$cgroup_type(r3, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000080), 0x9) 1.463211416s ago: executing program 6 (id=3719): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000004ea4fdffc327cfbc7a6ac53aa87f5c683b8e6c1cfed870a6fe23d3f9adbfabe7988d5e38920d31218840ff28f902", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7ff}, 0x18) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) sigaltstack(0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.412641398s ago: executing program 0 (id=3720): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000004ea4fdffc327cfbc7a6ac53aa87f5c683b8e6c1cfed870a6fe23d3f9adbfabe7988d5e38920d31218840ff28f90237b6f79e91dfd58ac8ee8df1f0caa4262be5927fc60e1274ba9491a7a102bc853d5d8a33ed70487a3bb83b60aaddf0adad085248789e8cba", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7ff}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.175944548s ago: executing program 5 (id=3721): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="060000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000380)=""/75}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) close(r4) 676.56985ms ago: executing program 3 (id=3722): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 622.062022ms ago: executing program 5 (id=3723): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) 621.409293ms ago: executing program 34 (id=3723): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) 585.176644ms ago: executing program 0 (id=3725): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000005c40), 0x403f, 0x0) 584.110114ms ago: executing program 6 (id=3726): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x9, 0x18}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x49, &(0x7f0000000300), 0x0, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x18, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 531.441506ms ago: executing program 0 (id=3727): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r6}, 0xe) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) 399.148652ms ago: executing program 3 (id=3728): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x80102, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x308) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000032c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x7, [@enum={0x3, 0x1, 0x0, 0x6, 0x4, [{0x5, 0xffff}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x2e, 0x5f]}}, &(0x7f00000031c0)=""/226, 0x33, 0xe2, 0x1}, 0x28) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) 96.972625ms ago: executing program 1 (id=3729): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000000306050000000100000000000100004a05000100070000000900020073797a3200000000"], 0x28}, 0x1, 0x0, 0x0, 0x40841}, 0x4) 0s ago: executing program 1 (id=3730): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_clone(0x1000, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r2}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000080)) kernel console output (not intermixed with test programs): 2 would solve the problem. [ 199.546527][T10974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.569669][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.573361][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.579932][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.608922][T11025] netlink: 'syz.5.2661': attribute type 30 has an invalid length. [ 199.667846][T10974] hsr_slave_0: entered promiscuous mode [ 199.673896][T10974] hsr_slave_1: entered promiscuous mode [ 199.679744][T10974] debugfs: 'hsr0' already exists in 'hsr' [ 199.685458][T10974] Cannot create hsr debugfs directory [ 199.833325][ T52] erspan0: left allmulticast mode [ 199.838374][ T52] erspan0: left promiscuous mode [ 199.843519][ T52] GPL: port 1(erspan0) entered disabled state [ 199.994844][T11061] netlink: 'syz.0.2673': attribute type 2 has an invalid length. [ 200.002644][T11061] netlink: 'syz.0.2673': attribute type 1 has an invalid length. [ 200.101425][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.111229][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.121260][ T52] bond0 (unregistering): Released all slaves [ 200.129841][ T52] bond1 (unregistering): Released all slaves [ 200.141565][T11048] __nla_validate_parse: 2 callbacks suppressed [ 200.141577][T11048] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2668'. [ 200.208060][T11070] loop0: detected capacity change from 0 to 512 [ 200.292819][ T52] hsr_slave_0: left promiscuous mode [ 200.301556][ T52] veth1_macvtap: left promiscuous mode [ 200.307291][ T52] veth0_macvtap: left promiscuous mode [ 200.313145][ T52] veth1_vlan: left promiscuous mode [ 200.318379][ T52] veth0_vlan: left promiscuous mode [ 200.376549][ T52] team0 (unregistering): Port device team_slave_1 removed [ 200.386775][ T52] team0 (unregistering): Port device team_slave_0 removed [ 200.394765][ T1604] smc: removing ib device syz! [ 200.415472][T11077] loop6: detected capacity change from 0 to 1024 [ 200.422137][T11077] ext2: Bad value for 'max_dir_size_kb' [ 200.581592][T10974] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 200.600344][T10974] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 200.609954][T10974] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 200.625203][T10974] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 200.643528][T11101] netlink: 'syz.5.2685': attribute type 2 has an invalid length. [ 200.651280][T11101] netlink: 'syz.5.2685': attribute type 1 has an invalid length. [ 200.658979][T11101] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2685'. [ 200.723799][T10974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.740722][T11111] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2686'. [ 200.753504][T10974] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.762812][ T1604] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.765799][T11113] loop5: detected capacity change from 0 to 512 [ 200.769877][ T1604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.777630][ T1604] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.786297][T11113] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.2687: error while reading EA inode 32 err=-116 [ 200.790366][ T1604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.802965][T11113] EXT4-fs (loop5): Remounting filesystem read-only [ 200.816691][T11113] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 200.827167][T11113] EXT4-fs (loop5): 1 orphan inode deleted [ 200.833351][T11113] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.847990][T11113] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.923094][T11123] syzkaller0: entered promiscuous mode [ 200.928575][T11123] syzkaller0: entered allmulticast mode [ 200.981523][T10974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.069397][T11134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2691'. [ 201.077246][T10974] veth0_vlan: entered promiscuous mode [ 201.078271][T11134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2691'. [ 201.089826][T10974] veth1_vlan: entered promiscuous mode [ 201.108702][T10974] veth0_macvtap: entered promiscuous mode [ 201.130084][T10974] veth1_macvtap: entered promiscuous mode [ 201.151230][T10974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.162623][T10974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.173594][ T1604] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.190115][ T1604] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.203527][ T6868] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.225446][ T6868] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.264078][T11156] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2698'. [ 201.292249][T11164] loop6: detected capacity change from 0 to 512 [ 201.325329][T11166] loop3: detected capacity change from 0 to 2048 [ 201.341493][T11166] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.353978][T11166] ext4 filesystem being mounted at /581/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.366995][T11166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.375756][T11166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.384433][T11166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2703'. [ 201.642532][T11115] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 201.658809][T11180] loop0: detected capacity change from 0 to 2048 [ 201.665724][T11115] EXT4-fs (loop3): Remounting filesystem read-only [ 201.718487][T11180] Alternate GPT is invalid, using primary GPT. [ 201.724805][T11180] loop0: p2 p3 p7 [ 201.791238][T11179] Set syz1 is full, maxelem 65536 reached [ 201.881550][ T29] kauditd_printk_skb: 484 callbacks suppressed [ 201.881564][ T29] audit: type=1326 audit(1763644437.083:53197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11181 comm="syz.0.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a3d5f749 code=0x7ffc0000 [ 201.913482][ T29] audit: type=1326 audit(1763644437.083:53198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11181 comm="syz.0.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a3d5f749 code=0x7ffc0000 [ 201.937050][ T29] audit: type=1326 audit(1763644437.083:53199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11181 comm="syz.0.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a3d5f749 code=0x7ffc0000 [ 201.960648][ T29] audit: type=1326 audit(1763644437.083:53200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11181 comm="syz.0.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a3d5f749 code=0x7ffc0000 [ 201.984261][ T29] audit: type=1326 audit(1763644437.083:53201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11181 comm="syz.0.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7a3d5f749 code=0x7ffc0000 [ 202.007814][ T29] audit: type=1326 audit(1763644437.083:53202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11181 comm="syz.0.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a3d5f749 code=0x7ffc0000 [ 202.031446][ T29] audit: type=1326 audit(1763644437.083:53203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11181 comm="syz.0.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a3d5f749 code=0x7ffc0000 [ 202.055121][ T29] audit: type=1326 audit(1763644437.083:53205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11181 comm="syz.0.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa7a3d5f749 code=0x7ffc0000 [ 202.078656][ T29] audit: type=1326 audit(1763644437.083:53206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11181 comm="syz.0.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a3d5f749 code=0x7ffc0000 [ 202.102293][ T29] audit: type=1326 audit(1763644437.083:53207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11181 comm="syz.0.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a3d5f749 code=0x7ffc0000 [ 202.137316][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.171410][T11184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2709'. [ 202.180368][T11184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2709'. [ 202.311431][T11187] syzkaller0: entered promiscuous mode [ 202.317121][T11187] syzkaller0: entered allmulticast mode [ 202.471011][T11199] loop5: detected capacity change from 0 to 2048 [ 202.532111][T11199] Alternate GPT is invalid, using primary GPT. [ 202.535996][T11198] Set syz1 is full, maxelem 65536 reached [ 202.538397][T11199] loop5: p2 p3 p7 [ 202.751236][T11212] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2720'. [ 203.222157][ T1604] Bluetooth: hci0: Frame reassembly failed (-84) [ 203.660596][T11245] infiniband syz!: set active [ 203.665351][T11245] infiniband syz!: added team_slave_0 [ 203.671551][T11247] loop3: detected capacity change from 0 to 2048 [ 203.683352][T11245] RDS/IB: syz!: added [ 203.687371][T11245] smc: adding ib device syz! with port count 1 [ 203.694804][T11245] smc: ib device syz! port 1 has no pnetid [ 203.743482][T11247] Alternate GPT is invalid, using primary GPT. [ 203.749872][T11247] loop3: p2 p3 p7 [ 203.830390][T11243] Set syz1 is full, maxelem 65536 reached [ 203.999296][T11270] loop6: detected capacity change from 0 to 128 [ 204.004770][T11266] GPL: port 1(erspan0) entered blocking state [ 204.011401][T11270] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 204.012261][T11266] GPL: port 1(erspan0) entered disabled state [ 204.024035][T11270] ext4 filesystem being mounted at /145/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 204.063437][T11266] erspan0: entered allmulticast mode [ 204.073557][T11266] erspan0: entered promiscuous mode [ 204.098412][T11274] GPL: port 1(erspan0) entered blocking state [ 204.104575][T11274] GPL: port 1(erspan0) entered forwarding state [ 204.149749][ T9122] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 204.224405][T11285] loop6: detected capacity change from 0 to 2048 [ 204.241059][T11291] syz!: rxe_newlink: already configured on team_slave_0 [ 204.260665][T11285] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.277060][T11285] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.291161][T11285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.315673][T11285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.424453][T11303] loop0: detected capacity change from 0 to 2048 [ 204.525385][T11303] Alternate GPT is invalid, using primary GPT. [ 204.531731][T11303] loop0: p2 p3 p7 [ 204.565487][T11289] Set syz1 is full, maxelem 65536 reached [ 204.908491][T11324] netlink: 'syz.0.2758': attribute type 30 has an invalid length. [ 204.962145][T11326] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 205.014333][T11331] syzkaller0: entered promiscuous mode [ 205.019888][T11331] syzkaller0: entered allmulticast mode [ 205.147040][T11340] loop3: detected capacity change from 0 to 512 [ 205.229339][ T3567] Bluetooth: hci0: command 0x1003 tx timeout [ 205.240616][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 205.589518][ T9122] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.688004][T11362] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 205.760390][ T57] Bluetooth: hci0: Frame reassembly failed (-84) [ 205.771161][T11377] __nla_validate_parse: 7 callbacks suppressed [ 205.771229][T11377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2780'. [ 205.786306][T11377] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2780'. [ 205.882619][T11384] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2783'. [ 205.942260][T11386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2784'. [ 205.951306][T11386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2784'. [ 205.964374][ T52] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.974014][ T52] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.985479][ T52] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.994203][ T52] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.061647][T11394] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 206.338822][ T1604] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.349186][ T1604] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.370443][T11425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2797'. [ 206.379340][T11425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2797'. [ 206.409855][T11427] loop1: detected capacity change from 0 to 512 [ 206.423015][ T1604] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.433539][ T1604] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.581318][T11412] chnl_net:caif_netlink_parms(): no params data found [ 206.606959][ T1604] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.617295][ T1604] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.889709][ T29] kauditd_printk_skb: 3208 callbacks suppressed [ 206.889724][ T29] audit: type=1326 audit(1763644442.093:56415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.0.2796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7a3d92005 code=0x7ffc0000 [ 206.930952][ T29] audit: type=1326 audit(1763644442.123:56416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.0.2796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa7a3d565e7 code=0x7ffc0000 [ 206.951909][T11442] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 206.954529][ T29] audit: type=1326 audit(1763644442.123:56418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.0.2796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7a3d92005 code=0x7ffc0000 [ 206.984731][ T29] audit: type=1326 audit(1763644442.123:56417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.0.2796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa7a3cfb829 code=0x7ffc0000 [ 207.008413][ T29] audit: type=1326 audit(1763644442.123:56419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.0.2796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fa7a3d5f749 code=0x7ffc0000 [ 207.032299][ T29] audit: type=1326 audit(1763644442.123:56420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.0.2796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7a3d92005 code=0x7ffc0000 [ 207.055891][ T29] audit: type=1326 audit(1763644442.133:56421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.0.2796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7a3d92005 code=0x7ffc0000 [ 207.080042][ T29] audit: type=1326 audit(1763644442.133:56422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.0.2796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7a3d92005 code=0x7ffc0000 [ 207.080624][T11412] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.103579][ T29] audit: type=1326 audit(1763644442.133:56423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.0.2796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa7a3d565e7 code=0x7ffc0000 [ 207.103604][ T29] audit: type=1326 audit(1763644442.133:56424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.0.2796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa7a3cfb829 code=0x7ffc0000 [ 207.110645][T11412] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.165176][T11412] bridge_slave_0: entered allmulticast mode [ 207.175496][T11412] bridge_slave_0: entered promiscuous mode [ 207.187318][ T1604] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.197682][ T1604] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.209295][T11412] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.216414][T11412] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.223714][T11412] bridge_slave_1: entered allmulticast mode [ 207.230320][T11412] bridge_slave_1: entered promiscuous mode [ 207.254836][T11412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.266985][T11412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.313364][T11412] team0: Port device team_slave_0 added [ 207.331611][T11412] team0: Port device team_slave_1 added [ 207.384072][T11412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.391055][T11412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.417035][T11412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.551698][T11455] syzkaller0: entered promiscuous mode [ 207.557417][T11455] syzkaller0: entered allmulticast mode [ 207.722296][ T1604] erspan0: left allmulticast mode [ 207.727393][ T1604] erspan0: left promiscuous mode [ 207.732600][ T1604] GPL: port 1(erspan0) entered disabled state [ 207.789368][ T3567] Bluetooth: hci0: command 0x1003 tx timeout [ 207.790536][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 207.818879][T11460] netlink: 'syz.6.2807': attribute type 2 has an invalid length. [ 207.826646][T11460] netlink: 'syz.6.2807': attribute type 1 has an invalid length. [ 207.834396][T11460] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2807'. [ 207.971130][ T1604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.980849][ T1604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.990576][ T1604] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 207.999458][ T1604] bond0 (unregistering): Released all slaves [ 208.007796][T11412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.014766][T11412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.040732][T11412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.104977][ T1604] tipc: Disabling bearer [ 208.110290][ T1604] tipc: Left network mode [ 208.148827][T11412] hsr_slave_0: entered promiscuous mode [ 208.170145][T11412] hsr_slave_1: entered promiscuous mode [ 208.176077][T11412] debugfs: 'hsr0' already exists in 'hsr' [ 208.181855][T11412] Cannot create hsr debugfs directory [ 208.207958][ T1604] hsr_slave_0: left promiscuous mode [ 208.215221][ T1604] veth0_macvtap: left promiscuous mode [ 208.220895][ T1604] veth1_vlan: left promiscuous mode [ 208.226210][ T1604] veth0_vlan: left promiscuous mode [ 208.289838][ T1604] team0 (unregistering): Port device team_slave_1 removed [ 208.301082][ T1604] team0 (unregistering): Port device team_slave_0 removed [ 208.356612][T11475] loop1: detected capacity change from 0 to 128 [ 208.378916][T11475] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 208.399404][T11475] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 208.532830][T10974] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 208.694964][ T1604] IPVS: stop unused estimator thread 0... [ 208.728556][T11412] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 208.740698][T11412] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 208.755064][T11412] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 208.764528][T11412] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 208.848668][T11412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.864459][T11412] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.878943][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 208.887509][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.894581][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.904689][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.911860][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.003758][T11412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.068224][T11508] netlink: 'syz.6.2818': attribute type 2 has an invalid length. [ 209.076034][T11508] netlink: 'syz.6.2818': attribute type 1 has an invalid length. [ 209.083795][T11508] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2818'. [ 209.091218][T11412] veth0_vlan: entered promiscuous mode [ 209.100528][T11412] veth1_vlan: entered promiscuous mode [ 209.129841][T11412] veth0_macvtap: entered promiscuous mode [ 209.140004][T11412] veth1_macvtap: entered promiscuous mode [ 209.151190][T11412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.165140][T11412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.177844][ T1604] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.200701][ T1604] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.210569][ T1604] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.225652][ T1604] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.238800][T11523] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.246689][T11523] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.259701][T11523] bridge0: entered allmulticast mode [ 209.294364][T11523] bridge_slave_1: left allmulticast mode [ 209.300854][T11523] bridge_slave_1: left promiscuous mode [ 209.307174][T11523] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.319256][T11523] bridge_slave_0: left allmulticast mode [ 209.325125][T11523] bridge_slave_0: left promiscuous mode [ 209.332265][T11523] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.430098][T11526] syzkaller0: entered promiscuous mode [ 209.435794][T11526] syzkaller0: entered allmulticast mode [ 210.220041][T11540] loop5: detected capacity change from 0 to 2048 [ 210.281620][T11540] Alternate GPT is invalid, using primary GPT. [ 210.287915][T11540] loop5: p2 p3 p7 [ 210.317974][T11538] Set syz1 is full, maxelem 65536 reached [ 210.652467][T11553] loop5: detected capacity change from 0 to 128 [ 210.660835][T11553] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 210.678139][T11553] ext4 filesystem being mounted at /438/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 210.752531][ T5481] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 210.909230][ T3567] Bluetooth: hci0: command 0x1003 tx timeout [ 210.915289][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 211.165211][T11571] syz!: rxe_newlink: already configured on team_slave_0 [ 211.275658][T11570] syzkaller0: entered promiscuous mode [ 211.281378][T11570] syzkaller0: entered allmulticast mode [ 211.636827][T11584] loop1: detected capacity change from 0 to 128 [ 211.649576][T11584] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 211.661977][T11584] ext4 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 211.740878][T10974] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 211.841500][T11599] syz!: rxe_newlink: already configured on team_slave_0 [ 211.908008][ T29] kauditd_printk_skb: 3415 callbacks suppressed [ 211.908030][ T29] audit: type=1326 audit(1763644447.103:59840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11604 comm="syz.0.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa7a3d565e7 code=0x7ffc0000 [ 211.947423][T11609] loop1: detected capacity change from 0 to 512 [ 211.960557][ T29] audit: type=1326 audit(1763644447.103:59841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11604 comm="syz.0.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa7a3cfb829 code=0x7ffc0000 [ 211.984039][ T29] audit: type=1326 audit(1763644447.103:59842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11604 comm="syz.0.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fa7a3d5f749 code=0x7ffc0000 [ 212.007586][ T29] audit: type=1326 audit(1763644447.113:59843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11604 comm="syz.0.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa7a3d565e7 code=0x7ffc0000 [ 212.031063][ T29] audit: type=1326 audit(1763644447.113:59844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11604 comm="syz.0.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa7a3cfb829 code=0x7ffc0000 [ 212.054678][ T29] audit: type=1326 audit(1763644447.113:59845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11604 comm="syz.0.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fa7a3d5f749 code=0x7ffc0000 [ 212.078282][ T29] audit: type=1326 audit(1763644447.123:59846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11604 comm="syz.0.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa7a3d565e7 code=0x7ffc0000 [ 212.101781][ T29] audit: type=1326 audit(1763644447.123:59847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11604 comm="syz.0.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa7a3cfb829 code=0x7ffc0000 [ 212.125354][ T29] audit: type=1326 audit(1763644447.123:59848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11604 comm="syz.0.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fa7a3d5f749 code=0x7ffc0000 [ 212.149060][ T29] audit: type=1326 audit(1763644447.133:59849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11604 comm="syz.0.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa7a3d565e7 code=0x7ffc0000 [ 213.634697][T11650] loop5: detected capacity change from 0 to 2048 [ 213.650679][T11650] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.662772][T11650] ext4 filesystem being mounted at /445/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.674130][T11650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.682510][T11650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.701793][T11648] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 213.722397][T11648] hsr_slave_1 (unregistering): left promiscuous mode [ 213.834913][T11665] random: crng reseeded on system resumption [ 214.337427][ T5481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.648542][T11686] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2879'. [ 214.749996][T11688] loop0: detected capacity change from 0 to 2048 [ 214.911077][T11685] Set syz1 is full, maxelem 65536 reached [ 215.011025][T11688] Alternate GPT is invalid, using primary GPT. [ 215.017308][T11688] loop0: p2 p3 p7 [ 215.204426][T11701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2884'. [ 215.213420][T11701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2884'. [ 215.251359][T11704] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 215.382704][T11703] syzkaller0: entered promiscuous mode [ 215.388386][T11703] syzkaller0: entered allmulticast mode [ 215.981173][T11717] loop5: detected capacity change from 0 to 1024 [ 215.992062][T11717] ext2: Bad value for 'max_dir_size_kb' [ 216.665821][T11735] random: crng reseeded on system resumption [ 216.673759][T11736] loop5: detected capacity change from 0 to 512 [ 216.699858][T11737] loop1: detected capacity change from 0 to 2048 [ 216.764447][T11742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.771884][T11742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.879207][T11737] Alternate GPT is invalid, using primary GPT. [ 216.885614][T11737] loop1: p2 p3 p7 [ 216.911484][T11742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.918886][T11742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.943270][T11727] Set syz1 is full, maxelem 65536 reached [ 217.033385][T11748] loop3: detected capacity change from 0 to 2048 [ 217.061104][T11748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.088723][T11748] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.120231][T11748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.130187][T11748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.291001][T11756] loop6: detected capacity change from 0 to 2048 [ 217.349211][T11753] Set syz1 is full, maxelem 65536 reached [ 217.355162][T11756] Alternate GPT is invalid, using primary GPT. [ 217.361647][T11756] loop6: p2 p3 p7 [ 217.805463][T11765] netlink: 'syz.6.2905': attribute type 2 has an invalid length. [ 217.813265][T11765] netlink: 'syz.6.2905': attribute type 1 has an invalid length. [ 217.821030][T11765] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2905'. [ 217.905564][T11767] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2906'. [ 217.914479][T11767] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2906'. [ 217.995614][ T29] kauditd_printk_skb: 2375 callbacks suppressed [ 217.995628][ T29] audit: type=1326 audit(1763644453.193:62225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.5.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cd58f749 code=0x7ffc0000 [ 218.025967][ T29] audit: type=1326 audit(1763644453.193:62226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.5.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cd58f749 code=0x7ffc0000 [ 218.049594][ T29] audit: type=1326 audit(1763644453.193:62227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.5.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cd58f749 code=0x7ffc0000 [ 218.073556][ T29] audit: type=1326 audit(1763644453.193:62228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.5.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cd58f749 code=0x7ffc0000 [ 218.097182][ T29] audit: type=1326 audit(1763644453.193:62229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.5.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23cd58f749 code=0x7ffc0000 [ 218.121267][ T29] audit: type=1326 audit(1763644453.193:62230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.5.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cd58f749 code=0x7ffc0000 [ 218.144981][ T29] audit: type=1326 audit(1763644453.193:62231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.5.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cd58f749 code=0x7ffc0000 [ 218.168656][ T29] audit: type=1326 audit(1763644453.193:62232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.5.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cd58f749 code=0x7ffc0000 [ 218.192271][ T29] audit: type=1326 audit(1763644453.193:62233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.5.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f23cd58f749 code=0x7ffc0000 [ 218.215932][ T29] audit: type=1326 audit(1763644453.193:62234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.5.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cd58f749 code=0x7ffc0000 [ 218.467190][T11412] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.495258][T11794] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 218.587039][T11802] netlink: 'syz.0.2919': attribute type 2 has an invalid length. [ 218.594810][T11802] netlink: 'syz.0.2919': attribute type 1 has an invalid length. [ 218.602565][T11802] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2919'. [ 218.720185][T11815] loop3: detected capacity change from 0 to 128 [ 218.794244][T11815] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 218.807130][T11815] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 219.057447][T11412] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 219.126353][T11825] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 219.223221][T11828] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2928'. [ 219.265969][T11832] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 219.286751][T11832] hsr_slave_1 (unregistering): left promiscuous mode [ 219.349370][T11840] netlink: 'syz.5.2932': attribute type 2 has an invalid length. [ 219.357147][T11840] netlink: 'syz.5.2932': attribute type 1 has an invalid length. [ 219.364928][T11840] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2932'. [ 219.459526][T11850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2935'. [ 219.468442][T11850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2935'. [ 219.584342][T11854] loop5: detected capacity change from 0 to 2048 [ 219.672242][T11854] Alternate GPT is invalid, using primary GPT. [ 219.677473][T11847] Set syz1 is full, maxelem 65536 reached [ 219.678753][T11854] loop5: p2 p3 p7 [ 219.908202][T11865] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2941'. [ 220.144632][T11870] syzkaller0: entered promiscuous mode [ 220.150160][T11870] syzkaller0: entered allmulticast mode [ 220.169625][T11873] random: crng reseeded on system resumption [ 220.204474][T11875] netlink: 'syz.6.2945': attribute type 2 has an invalid length. [ 220.212331][T11875] netlink: 'syz.6.2945': attribute type 1 has an invalid length. [ 220.220078][T11875] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2945'. [ 220.397103][T11886] loop3: detected capacity change from 0 to 2048 [ 220.525412][T11881] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 220.529375][T11877] Set syz1 is full, maxelem 65536 reached [ 220.569304][T11886] Alternate GPT is invalid, using primary GPT. [ 220.575848][T11886] loop3: p2 p3 p7 [ 220.973254][T11896] loop6: detected capacity change from 0 to 2048 [ 221.006655][T11912] netlink: 'syz.0.2957': attribute type 2 has an invalid length. [ 221.014412][T11912] netlink: 'syz.0.2957': attribute type 1 has an invalid length. [ 221.022137][T11912] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2957'. [ 221.069952][T11896] Alternate GPT is invalid, using primary GPT. [ 221.076537][T11896] loop6: p2 p3 p7 [ 221.082397][T11916] loop3: detected capacity change from 0 to 128 [ 221.116922][T11916] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 221.132099][T11893] Set syz1 is full, maxelem 65536 reached [ 221.145495][T11916] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 221.253227][T11412] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 221.280099][T11929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2959'. [ 221.314812][T11931] loop0: detected capacity change from 0 to 512 [ 221.865272][T11945] loop3: detected capacity change from 0 to 2048 [ 221.951665][T11945] Alternate GPT is invalid, using primary GPT. [ 221.958055][T11945] loop3: p2 p3 p7 [ 222.228821][T11964] random: crng reseeded on system resumption [ 222.258334][T11966] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 222.328384][T11948] Set syz1 is full, maxelem 65536 reached [ 222.399902][T11976] loop5: detected capacity change from 0 to 2048 [ 222.492477][T11976] Alternate GPT is invalid, using primary GPT. [ 222.498821][T11976] loop5: p2 p3 p7 [ 222.543095][T11967] Set syz1 is full, maxelem 65536 reached [ 222.583313][T11992] loop6: detected capacity change from 0 to 512 [ 222.610445][T11988] syzkaller0: entered promiscuous mode [ 222.615913][T11988] syzkaller0: entered allmulticast mode [ 222.637024][T11996] random: crng reseeded on system resumption [ 222.721185][T12007] loop1: detected capacity change from 0 to 512 [ 223.271295][ T29] kauditd_printk_skb: 2579 callbacks suppressed [ 223.271316][ T29] audit: type=1326 audit(1763644458.473:64814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12018 comm="syz.5.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cd58f749 code=0x7ffc0000 [ 223.307817][ T29] audit: type=1326 audit(1763644458.473:64815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12018 comm="syz.5.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cd58f749 code=0x7ffc0000 [ 223.331513][ T29] audit: type=1326 audit(1763644458.503:64816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12018 comm="syz.5.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23cd58f749 code=0x7ffc0000 [ 223.355085][ T29] audit: type=1326 audit(1763644458.503:64817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12018 comm="syz.5.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cd58f749 code=0x7ffc0000 [ 223.378642][ T29] audit: type=1326 audit(1763644458.503:64818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12018 comm="syz.5.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cd58f749 code=0x7ffc0000 [ 223.402784][ T29] audit: type=1326 audit(1763644458.513:64819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12018 comm="syz.5.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cd58f749 code=0x7ffc0000 [ 223.426397][ T29] audit: type=1326 audit(1763644458.513:64820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12018 comm="syz.5.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cd58f749 code=0x7ffc0000 [ 223.449951][ T29] audit: type=1326 audit(1763644458.513:64821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12018 comm="syz.5.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23cd58f749 code=0x7ffc0000 [ 223.473557][ T29] audit: type=1326 audit(1763644458.513:64822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12018 comm="syz.5.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cd58f749 code=0x7ffc0000 [ 223.497152][ T29] audit: type=1326 audit(1763644458.513:64823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12018 comm="syz.5.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cd58f749 code=0x7ffc0000 [ 223.755380][T12038] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 223.771080][T12041] random: crng reseeded on system resumption [ 223.983624][T12059] loop3: detected capacity change from 0 to 512 [ 224.013848][T12055] loop5: detected capacity change from 0 to 2048 [ 224.111233][T12055] Alternate GPT is invalid, using primary GPT. [ 224.117503][T12055] loop5: p2 p3 p7 [ 224.150563][T12047] Set syz1 is full, maxelem 65536 reached [ 224.242354][T12066] validate_nla: 2 callbacks suppressed [ 224.242369][T12066] netlink: 'syz.1.3009': attribute type 2 has an invalid length. [ 224.255659][T12066] netlink: 'syz.1.3009': attribute type 1 has an invalid length. [ 224.263409][T12066] __nla_validate_parse: 9 callbacks suppressed [ 224.263421][T12066] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3009'. [ 224.380184][T12078] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 224.464581][T12073] loop1: detected capacity change from 0 to 1024 [ 224.471669][T12073] ext2: Bad value for 'max_dir_size_kb' [ 224.514837][T12098] netlink: 'syz.5.3021': attribute type 2 has an invalid length. [ 224.522615][T12098] netlink: 'syz.5.3021': attribute type 1 has an invalid length. [ 224.526031][T12096] syzkaller0: entered promiscuous mode [ 224.530364][T12098] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3021'. [ 224.535792][T12096] syzkaller0: entered allmulticast mode [ 224.603141][T12107] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3024'. [ 224.612058][T12107] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3024'. [ 224.651581][T12108] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 224.680440][T12111] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3025'. [ 224.734550][T12115] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 224.845316][T12132] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 224.891860][T12137] syzkaller0: entered promiscuous mode [ 224.897337][T12137] syzkaller0: entered allmulticast mode [ 224.912343][T12139] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 224.939497][T12142] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3038'. [ 225.037114][T12152] loop5: detected capacity change from 0 to 512 [ 225.179743][T12157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3044'. [ 225.188704][T12157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3044'. [ 225.423809][T12158] hsr_slave_1 (unregistering): left promiscuous mode [ 225.613884][T12164] random: crng reseeded on system resumption [ 225.672614][T12172] syz!: rxe_newlink: already configured on team_slave_0 [ 225.747544][T12176] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 225.759380][T12181] syzkaller0: entered promiscuous mode [ 225.764855][T12181] syzkaller0: entered allmulticast mode [ 225.990450][T12192] netlink: 'syz.3.3058': attribute type 2 has an invalid length. [ 225.998181][T12192] netlink: 'syz.3.3058': attribute type 1 has an invalid length. [ 226.092991][T12199] loop6: detected capacity change from 0 to 2048 [ 226.202117][T12203] loop5: detected capacity change from 0 to 1024 [ 226.209032][T12203] ext2: Bad value for 'max_dir_size_kb' [ 226.232477][T12199] Alternate GPT is invalid, using primary GPT. [ 226.238934][T12199] loop6: p2 p3 p7 [ 226.279536][T12187] Set syz1 is full, maxelem 65536 reached [ 226.531763][T12216] syzkaller0: entered promiscuous mode [ 226.537254][T12216] syzkaller0: entered allmulticast mode [ 226.759861][T12232] loop0: detected capacity change from 0 to 128 [ 226.781052][T12232] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 226.793340][T12232] ext4 filesystem being mounted at /588/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 226.997332][T12242] loop5: detected capacity change from 0 to 2048 [ 227.111493][T12242] Alternate GPT is invalid, using primary GPT. [ 227.117806][T12242] loop5: p2 p3 p7 [ 227.123375][T12240] Set syz1 is full, maxelem 65536 reached [ 227.244003][T12244] loop5: detected capacity change from 0 to 2048 [ 227.271147][T12244] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.393828][T12244] ext4 filesystem being mounted at /493/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.407605][T12244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.418601][T12251] random: crng reseeded on system resumption [ 227.430101][T12244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.490239][T12244] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12244 comm=syz.5.3074 [ 227.629387][ T3567] Bluetooth: hci0: sending frame failed (-49) [ 227.635542][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 227.697354][T12232] syz.0.3070 (12232) used greatest stack depth: 9312 bytes left [ 227.736608][ T3316] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 227.800137][T12265] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 227.914420][T12282] random: crng reseeded on system resumption [ 228.077180][T12293] loop1: detected capacity change from 0 to 128 [ 228.102026][T12293] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 228.116765][T12293] ext4 filesystem being mounted at /99/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 228.250359][T10974] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 228.279375][ T29] kauditd_printk_skb: 2185 callbacks suppressed [ 228.279386][ T29] audit: type=1326 audit(1763644463.483:67009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12276 comm="syz.0.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7a3d92005 code=0x7ffc0000 [ 228.320473][ T5481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.344923][ T29] audit: type=1326 audit(1763644463.513:67010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12276 comm="syz.0.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa7a3d565e7 code=0x7ffc0000 [ 228.368385][ T29] audit: type=1326 audit(1763644463.513:67011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12276 comm="syz.0.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa7a3cfb829 code=0x7ffc0000 [ 228.391881][ T29] audit: type=1326 audit(1763644463.513:67012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12276 comm="syz.0.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fa7a3d5f749 code=0x7ffc0000 [ 228.415460][ T29] audit: type=1326 audit(1763644463.513:67013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12276 comm="syz.0.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7a3d92005 code=0x7ffc0000 [ 228.439007][ T29] audit: type=1326 audit(1763644463.513:67014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12276 comm="syz.0.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7a3d92005 code=0x7ffc0000 [ 228.462616][ T29] audit: type=1326 audit(1763644463.513:67015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12276 comm="syz.0.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7a3d92005 code=0x7ffc0000 [ 228.486188][ T29] audit: type=1326 audit(1763644463.513:67016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12276 comm="syz.0.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa7a3d565e7 code=0x7ffc0000 [ 228.509702][ T29] audit: type=1326 audit(1763644463.513:67017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12276 comm="syz.0.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa7a3cfb829 code=0x7ffc0000 [ 228.533175][ T29] audit: type=1326 audit(1763644463.513:67018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12276 comm="syz.0.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fa7a3d5f749 code=0x7ffc0000 [ 228.698576][T12309] loop5: detected capacity change from 0 to 2048 [ 228.768811][T12313] syzkaller0: entered promiscuous mode [ 228.774339][T12313] syzkaller0: entered allmulticast mode [ 228.792193][T12309] Alternate GPT is invalid, using primary GPT. [ 228.798636][T12309] loop5: p2 p3 p7 [ 228.853343][T12308] Set syz1 is full, maxelem 65536 reached [ 228.897912][T12318] random: crng reseeded on system resumption [ 228.974851][T12320] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 229.033795][T12331] loop6: detected capacity change from 0 to 128 [ 229.056390][T12331] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 229.099806][T12331] ext4 filesystem being mounted at /218/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 229.888819][ T9122] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.970515][T12352] random: crng reseeded on system resumption [ 230.025978][T12354] syzkaller0: entered promiscuous mode [ 230.032064][T12354] syzkaller0: entered allmulticast mode [ 230.178986][T12358] GPL: port 1(erspan0) entered blocking state [ 230.186494][T12358] GPL: port 1(erspan0) entered disabled state [ 230.198537][T12358] erspan0: entered allmulticast mode [ 230.208581][T12358] erspan0: entered promiscuous mode [ 230.212422][T12363] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 230.226073][T12358] GPL: port 1(erspan0) entered blocking state [ 230.232477][T12358] GPL: port 1(erspan0) entered forwarding state [ 230.317926][T12374] loop6: detected capacity change from 0 to 128 [ 230.319417][T12376] netlink: 'syz.3.3122': attribute type 2 has an invalid length. [ 230.326439][T12374] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 230.331923][T12376] netlink: 'syz.3.3122': attribute type 1 has an invalid length. [ 230.349289][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 230.351663][T12376] __nla_validate_parse: 11 callbacks suppressed [ 230.351710][T12376] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3122'. [ 230.373870][T12374] ext4 filesystem being mounted at /225/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 230.437401][T12379] loop1: detected capacity change from 0 to 1024 [ 230.449607][T12379] EXT4-fs: Ignoring removed orlov option [ 230.455724][T12379] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 230.476864][T12379] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.546767][T10974] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.701148][T12396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3126'. [ 230.816476][T12402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3130'. [ 230.825438][T12402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3130'. [ 231.003085][ T6868] Bluetooth: hci0: Frame reassembly failed (-84) [ 231.141460][T12416] loop5: detected capacity change from 0 to 2048 [ 231.231926][T12416] Alternate GPT is invalid, using primary GPT. [ 231.233651][T12412] Set syz1 is full, maxelem 65536 reached [ 231.238330][T12416] loop5: p2 p3 p7 [ 231.251720][ T9122] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 231.545744][T12420] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 231.724885][T12425] Set syz1 is full, maxelem 65536 reached [ 231.740018][T12432] loop1: detected capacity change from 0 to 2048 [ 231.752780][T12431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3140'. [ 231.761649][T12431] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3140'. [ 231.853036][T12432] Alternate GPT is invalid, using primary GPT. [ 231.859420][T12432] loop1: p2 p3 p7 [ 231.883906][T12440] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 231.908308][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3144'. [ 231.917210][T12444] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3144'. [ 231.930807][ T52] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.940080][ T52] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.952113][ T52] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.963037][ T52] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.977138][T12446] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 232.113858][T12459] syzkaller0: entered promiscuous mode [ 232.119395][T12459] syzkaller0: entered allmulticast mode [ 232.177844][T12462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3152'. [ 232.805247][T12482] loop3: detected capacity change from 0 to 1024 [ 232.812252][T12482] EXT4-fs: Ignoring removed orlov option [ 232.822962][T12482] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 232.850642][T12482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.898141][T11412] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.069179][ T3567] Bluetooth: hci0: command 0x1003 tx timeout [ 233.072955][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 233.084372][T12500] loop5: detected capacity change from 0 to 512 [ 233.629898][T12511] loop3: detected capacity change from 0 to 2048 [ 233.663197][T12511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.694972][T12511] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.769094][T12511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.818878][T12511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.852197][ T29] kauditd_printk_skb: 4565 callbacks suppressed [ 233.852211][ T29] audit: type=1326 audit(1763644469.053:71584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12530 comm="syz.1.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8e67f749 code=0x7ffc0000 [ 233.902333][ T29] audit: type=1326 audit(1763644469.083:71585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12530 comm="syz.1.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8e67f749 code=0x7ffc0000 [ 233.926004][ T29] audit: type=1326 audit(1763644469.083:71586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12530 comm="syz.1.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8e67f749 code=0x7ffc0000 [ 233.949561][ T29] audit: type=1326 audit(1763644469.083:71587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12530 comm="syz.1.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a8e67f749 code=0x7ffc0000 [ 233.973186][ T29] audit: type=1326 audit(1763644469.083:71588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12530 comm="syz.1.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8e67f749 code=0x7ffc0000 [ 233.996754][ T29] audit: type=1326 audit(1763644469.083:71589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12530 comm="syz.1.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8e67f749 code=0x7ffc0000 [ 234.020342][ T29] audit: type=1326 audit(1763644469.083:71590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12530 comm="syz.1.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8e67f749 code=0x7ffc0000 [ 234.043898][ T29] audit: type=1326 audit(1763644469.083:71591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12530 comm="syz.1.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8e67f749 code=0x7ffc0000 [ 234.067563][ T29] audit: type=1326 audit(1763644469.083:71592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12530 comm="syz.1.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4a8e67f749 code=0x7ffc0000 [ 234.091155][ T29] audit: type=1326 audit(1763644469.083:71593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12530 comm="syz.1.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8e67f749 code=0x7ffc0000 [ 234.202933][T12506] chnl_net:caif_netlink_parms(): no params data found [ 234.222548][T12543] loop6: detected capacity change from 0 to 2048 [ 234.245916][T12543] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.258538][T12543] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.273501][T12548] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 234.290850][T12543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.302990][T12543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.317110][ T998] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.327400][ T998] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.345422][T12506] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.352503][T12506] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.359811][T12506] bridge_slave_0: entered allmulticast mode [ 234.366250][T12506] bridge_slave_0: entered promiscuous mode [ 234.375435][T12506] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.382611][T12506] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.389992][T12506] bridge_slave_1: entered allmulticast mode [ 234.396555][T12506] bridge_slave_1: entered promiscuous mode [ 234.413367][ T998] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.423716][ T998] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.460117][T12506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.470496][T12506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.490638][T12506] team0: Port device team_slave_0 added [ 234.497358][T12506] team0: Port device team_slave_1 added [ 234.506442][ T998] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.516910][ T998] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.563889][T12506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.570885][T12506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.596812][T12506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.612484][ T998] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.622781][ T998] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.651766][T12506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.658739][T12506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.684740][T12506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.737075][T12506] hsr_slave_0: entered promiscuous mode [ 234.743318][T12506] hsr_slave_1: entered promiscuous mode [ 234.749247][T12506] debugfs: 'hsr0' already exists in 'hsr' [ 234.755022][T12506] Cannot create hsr debugfs directory [ 234.768647][ T998] erspan0: left allmulticast mode [ 234.773806][ T998] erspan0: left promiscuous mode [ 234.778823][ T998] GPL: port 1(erspan0) entered disabled state [ 234.861283][T11412] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.892158][ T998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.902086][ T998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.916303][ T998] bond0 (unregistering): Released all slaves [ 235.046091][T12568] netlink: 'syz.3.3181': attribute type 2 has an invalid length. [ 235.053899][T12568] netlink: 'syz.3.3181': attribute type 1 has an invalid length. [ 235.070025][ T998] hsr_slave_0: left promiscuous mode [ 235.078842][ T998] veth1_macvtap: left promiscuous mode [ 235.085156][ T998] veth0_macvtap: left promiscuous mode [ 235.092917][ T998] veth1_vlan: left promiscuous mode [ 235.098469][ T998] veth0_vlan: left promiscuous mode [ 235.162193][ T998] team0 (unregistering): Port device team_slave_1 removed [ 235.171648][ T998] team0 (unregistering): Port device team_slave_0 removed [ 235.198260][ T998] team0 (unregistering): Port device dummy0 removed [ 235.219326][ T9122] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.264127][T12582] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 235.392030][T12506] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 235.419585][T12506] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 235.439444][T12506] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 235.491713][T12506] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 235.507703][T12597] loop5: detected capacity change from 0 to 2048 [ 235.591800][T12597] Alternate GPT is invalid, using primary GPT. [ 235.598154][T12597] loop5: p2 p3 p7 [ 235.669892][T12590] Set syz1 is full, maxelem 65536 reached [ 235.703174][T12600] syzkaller0: entered promiscuous mode [ 235.708664][T12600] syzkaller0: entered allmulticast mode [ 235.766087][ T998] IPVS: stop unused estimator thread 0... [ 235.805637][T12506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.823444][T12506] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.834820][ T998] ------------[ cut here ]------------ [ 235.840322][ T998] WARNING: CPU: 1 PID: 998 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x179/0x1f0 [ 235.849892][ T998] Modules linked in: [ 235.853797][ T998] CPU: 1 UID: 0 PID: 998 Comm: kworker/u8:5 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 235.865281][ T998] Tainted: [W]=WARN [ 235.869072][ T998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 235.879195][ T998] Workqueue: netns cleanup_net [ 235.884026][ T998] RIP: 0010:xfrm_state_fini+0x179/0x1f0 [ 235.889619][ T998] Code: 48 8d bb 70 0e 00 00 e8 95 31 b7 fc 48 8b bb 70 0e 00 00 e8 59 e0 c3 fc 5b 41 5e 41 5f 5d e9 3e 6b b5 00 cc e8 38 d8 9b fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 2a d8 9b fc 90 0f 0b 90 4c 89 f7 e8 5e [ 235.909391][ T998] RSP: 0018:ffffc900014b7c60 EFLAGS: 00010293 [ 235.915617][ T998] RAX: ffffffff84bb7228 RBX: ffff88810a6f9800 RCX: ffff88810331b180 [ 235.923615][ T998] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810a6fa640 [ 235.931646][ T998] RBP: ffffffff86c91100 R08: 0001ffff8684810f R09: 0000000000000000 [ 235.935148][T12610] netlink: 'syz.1.3193': attribute type 2 has an invalid length. [ 235.939625][ T998] R10: ffffc900014b7be8 R11: 0001c900014b7be8 R12: ffffffff86c91120 [ 235.939650][ T998] R13: ffff88810a6f9828 R14: ffff88810a6fa640 R15: ffff88810a6f9800 [ 235.939661][ T998] FS: 0000000000000000(0000) GS:ffff8882aef11000(0000) knlGS:0000000000000000 [ 235.939675][ T998] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.939687][ T998] CR2: 0000001b32322ff8 CR3: 000000011aa68000 CR4: 00000000003506f0 [ 235.947426][T12610] netlink: 'syz.1.3193': attribute type 1 has an invalid length. [ 235.955390][ T998] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 235.955403][ T998] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 235.955415][ T998] Call Trace: [ 235.955431][ T998] [ 235.955439][ T998] xfrm_net_exit+0x2d/0x60 [ 235.955461][ T998] ops_undo_list+0x27b/0x410 [ 235.963446][T12610] __nla_validate_parse: 6 callbacks suppressed [ 235.963458][T12610] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3193'. [ 235.972373][ T998] cleanup_net+0x2f4/0x4f0 [ 236.045345][ T998] process_scheduled_works+0x4ce/0x9d0 [ 236.050825][ T998] worker_thread+0x582/0x770 [ 236.055405][ T998] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 236.061260][ T998] kthread+0x489/0x510 [ 236.065329][ T998] ? finish_task_switch+0xad/0x2b0 [ 236.070484][ T998] ? __pfx_worker_thread+0x10/0x10 [ 236.075590][ T998] ? __pfx_kthread+0x10/0x10 [ 236.080256][ T998] ret_from_fork+0x122/0x1b0 [ 236.084860][ T998] ? __pfx_kthread+0x10/0x10 [ 236.089505][ T998] ret_from_fork_asm+0x1a/0x30 [ 236.094280][ T998] [ 236.097398][ T998] ---[ end trace 0000000000000000 ]--- [ 236.128346][ T3447] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.135444][ T3447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.169294][T12616] loop3: detected capacity change from 0 to 2048 [ 236.186948][T12619] loop1: detected capacity change from 0 to 128 [ 236.205265][T12619] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 236.219963][T12619] ext4 filesystem being mounted at /118/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 236.237160][T12616] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.265487][T12616] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.266329][ T3447] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.282892][ T3447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.282901][T12616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.282970][T12616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.343173][T10974] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 236.352650][T12616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3194'. [ 236.477283][T12506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.522208][T12641] syz!: rxe_newlink: already configured on team_slave_0 [ 236.617721][T12649] syzkaller0: entered promiscuous mode [ 236.623230][T12649] syzkaller0: entered allmulticast mode [ 236.869090][T12650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3201'. [ 236.877522][T12506] veth0_vlan: entered promiscuous mode [ 236.878080][T12650] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3201'. [ 236.905598][T12506] veth1_vlan: entered promiscuous mode [ 236.949746][T12506] veth0_macvtap: entered promiscuous mode [ 236.965948][T12506] veth1_macvtap: entered promiscuous mode [ 236.977865][T12506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.031917][T12506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.052222][T12659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3203'. [ 237.103576][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.120083][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.128785][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.139864][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.346562][T12668] netlink: 'syz.6.3205': attribute type 2 has an invalid length. [ 237.354429][T12668] netlink: 'syz.6.3205': attribute type 1 has an invalid length. [ 237.362193][T12668] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3205'. [ 237.371550][T12667] loop0: detected capacity change from 0 to 2048 [ 237.463413][T12667] Alternate GPT is invalid, using primary GPT. [ 237.469906][T12667] loop0: p2 p3 p7 [ 237.529694][T12664] Set syz1 is full, maxelem 65536 reached [ 237.535955][T11412] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.634688][T12687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3212'. [ 237.643785][T12687] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3212'. [ 238.180181][T12691] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 238.216512][T12691] hsr_slave_1 (unregistering): left promiscuous mode [ 238.626009][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3217'. [ 238.670726][T12726] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.678726][T12726] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.688721][T12726] bridge0: entered allmulticast mode [ 238.709695][T12726] bridge_slave_1: left allmulticast mode [ 238.715487][T12726] bridge_slave_1: left promiscuous mode [ 238.722157][T12726] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.734678][T12726] bridge_slave_0: left allmulticast mode [ 238.740679][T12726] bridge_slave_0: left promiscuous mode [ 238.746887][T12726] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.764636][T12734] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 238.870365][T12732] syzkaller0: entered promiscuous mode [ 238.875843][T12732] syzkaller0: entered allmulticast mode [ 238.928338][T12743] loop1: detected capacity change from 0 to 512 [ 239.083652][T12748] loop3: detected capacity change from 0 to 512 [ 239.783520][T12781] syzkaller0: entered promiscuous mode [ 239.789047][T12781] syzkaller0: entered allmulticast mode [ 240.023937][T12792] loop3: detected capacity change from 0 to 2048 [ 240.283447][T12792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.354104][T12792] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.406515][T12792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.414938][T12792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.455006][ T29] kauditd_printk_skb: 1497 callbacks suppressed [ 240.455018][ T29] audit: type=1326 audit(1763644475.653:73091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12809 comm="syz.1.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8e67f749 code=0x7ffc0000 [ 240.490538][ T29] audit: type=1326 audit(1763644475.683:73092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12809 comm="syz.1.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8e67f749 code=0x7ffc0000 [ 240.514273][ T29] audit: type=1326 audit(1763644475.683:73093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12809 comm="syz.1.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8e67f749 code=0x7ffc0000 [ 240.537847][ T29] audit: type=1326 audit(1763644475.683:73094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12809 comm="syz.1.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8e67f749 code=0x7ffc0000 [ 240.561400][ T29] audit: type=1326 audit(1763644475.683:73095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12809 comm="syz.1.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a8e67f749 code=0x7ffc0000 [ 240.584954][ T29] audit: type=1326 audit(1763644475.683:73096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12809 comm="syz.1.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8e67f749 code=0x7ffc0000 [ 240.608539][ T29] audit: type=1326 audit(1763644475.683:73097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12809 comm="syz.1.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8e67f749 code=0x7ffc0000 [ 240.632140][ T29] audit: type=1326 audit(1763644475.683:73098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12809 comm="syz.1.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8e67f749 code=0x7ffc0000 [ 240.655685][ T29] audit: type=1326 audit(1763644475.683:73099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12809 comm="syz.1.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4a8e67f749 code=0x7ffc0000 [ 240.679163][ T29] audit: type=1326 audit(1763644475.683:73100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12809 comm="syz.1.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8e67f749 code=0x7ffc0000 [ 240.872056][T12826] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 240.953412][T12832] loop6: detected capacity change from 0 to 2048 [ 240.978025][T12832] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.978381][T11412] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.991075][T12832] ext4 filesystem being mounted at /265/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.018768][T12832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.027773][T12832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.037509][T12832] __nla_validate_parse: 5 callbacks suppressed [ 241.037521][T12832] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3265'. [ 241.058742][T12836] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 241.109427][T12844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3269'. [ 241.118332][T12844] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3269'. [ 241.197353][T12852] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.205469][T12852] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.215361][T12852] bridge0: entered allmulticast mode [ 241.240356][T12852] bridge_slave_1: left allmulticast mode [ 241.246303][T12852] bridge_slave_1: left promiscuous mode [ 241.252884][T12852] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.265664][T12852] bridge_slave_0: left allmulticast mode [ 241.271727][T12852] bridge_slave_0: left promiscuous mode [ 241.278514][T12852] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.542058][T12876] loop0: detected capacity change from 0 to 2048 [ 241.552690][T12861] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 241.591409][T12876] Alternate GPT is invalid, using primary GPT. [ 241.597867][T12876] loop0: p2 p3 p7 [ 241.616472][T12868] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 241.639314][T12869] Set syz1 is full, maxelem 65536 reached [ 241.671372][T12881] syzkaller0: entered promiscuous mode [ 241.676880][T12881] syzkaller0: entered allmulticast mode [ 241.698306][ T9122] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.793249][T12904] syz!: rxe_newlink: already configured on team_slave_0 [ 241.890429][T12918] loop1: detected capacity change from 0 to 2048 [ 241.920839][T12918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.934449][T12918] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.946291][T12918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.954791][T12918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.964096][T12918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3293'. [ 242.014878][T12926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3291'. [ 242.168923][T12934] loop5: detected capacity change from 0 to 2048 [ 242.231938][T12934] Alternate GPT is invalid, using primary GPT. [ 242.238332][T12934] loop5: p2 p3 p7 [ 242.287745][T12933] Set syz1 is full, maxelem 65536 reached [ 242.378041][T12936] syzkaller0: entered promiscuous mode [ 242.383781][T12936] syzkaller0: entered allmulticast mode [ 242.606712][T10974] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.654817][T12949] loop6: detected capacity change from 0 to 128 [ 242.667880][T12949] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 242.681004][T12949] ext4 filesystem being mounted at /269/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 242.795308][T12945] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 242.830533][T12966] netlink: 'syz.1.3307': attribute type 2 has an invalid length. [ 242.838288][T12966] netlink: 'syz.1.3307': attribute type 1 has an invalid length. [ 242.846221][T12966] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3307'. [ 242.931480][T12970] syzkaller0: entered promiscuous mode [ 242.937061][T12970] syzkaller0: entered allmulticast mode [ 243.384302][T12975] loop5: detected capacity change from 0 to 2048 [ 243.401451][T12975] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.414279][T12975] ext4 filesystem being mounted at /542/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.427961][T12975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.436746][T12975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.446055][T12975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3310'. [ 243.561691][ T9122] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 243.589562][T12984] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 243.626583][ T57] Bluetooth: hci0: Frame reassembly failed (-84) [ 244.084942][ T5481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.240111][T12998] loop5: detected capacity change from 0 to 2048 [ 244.305461][T12996] Set syz1 is full, maxelem 65536 reached [ 244.312493][T12998] Alternate GPT is invalid, using primary GPT. [ 244.318998][T12998] loop5: p2 p3 p7 [ 244.495965][T13009] loop0: detected capacity change from 0 to 128 [ 244.515541][T13009] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 244.541612][T13011] loop3: detected capacity change from 0 to 2048 [ 244.544165][T13009] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 244.631228][T13011] Alternate GPT is invalid, using primary GPT. [ 244.637491][T13011] loop3: p2 p3 p7 [ 244.693977][T13004] Set syz1 is full, maxelem 65536 reached [ 244.718594][T12506] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 244.963782][T13031] loop1: detected capacity change from 0 to 1024 [ 244.970830][T13031] EXT4-fs: Ignoring removed orlov option [ 244.977266][T13031] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 245.062751][T13031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.168406][T10974] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.347429][T13044] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 245.460147][ T29] kauditd_printk_skb: 7423 callbacks suppressed [ 245.460161][ T29] audit: type=1326 audit(1763644480.663:80524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13014 comm="syz.0.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5375d32005 code=0x7ffc0000 [ 245.516880][ T29] audit: type=1326 audit(1763644480.663:80525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13014 comm="syz.0.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5375d32005 code=0x7ffc0000 [ 245.540470][ T29] audit: type=1326 audit(1763644480.663:80526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13014 comm="syz.0.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5375d32005 code=0x7ffc0000 [ 245.564112][ T29] audit: type=1326 audit(1763644480.663:80527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13014 comm="syz.0.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5375d32005 code=0x7ffc0000 [ 245.587693][ T29] audit: type=1326 audit(1763644480.663:80528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13014 comm="syz.0.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5375d32005 code=0x7ffc0000 [ 245.611290][ T29] audit: type=1326 audit(1763644480.663:80529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13014 comm="syz.0.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5375d32005 code=0x7ffc0000 [ 245.634906][ T29] audit: type=1326 audit(1763644480.663:80530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13014 comm="syz.0.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5375d32005 code=0x7ffc0000 [ 245.639317][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 245.658568][ T29] audit: type=1326 audit(1763644480.663:80531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13014 comm="syz.0.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5375d32005 code=0x7ffc0000 [ 245.664680][ T3567] Bluetooth: hci0: command 0x1003 tx timeout [ 245.688037][ T29] audit: type=1326 audit(1763644480.663:80532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13014 comm="syz.0.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5375d32005 code=0x7ffc0000 [ 245.688059][ T29] audit: type=1326 audit(1763644480.663:80533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13014 comm="syz.0.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5375d32005 code=0x7ffc0000 [ 245.852725][T13054] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 246.075832][T13067] loop1: detected capacity change from 0 to 512 [ 246.117705][T13070] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 246.463892][T13083] random: crng reseeded on system resumption [ 246.821051][T13094] __nla_validate_parse: 1 callbacks suppressed [ 246.821065][T13094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3351'. [ 247.086727][T13110] loop1: detected capacity change from 0 to 2048 [ 247.162672][T13110] Alternate GPT is invalid, using primary GPT. [ 247.169049][T13110] loop1: p2 p3 p7 [ 247.201933][T13107] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 247.529633][T13117] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 247.630951][T13104] Set syz1 is full, maxelem 65536 reached [ 247.887390][T13128] bridge0: entered allmulticast mode [ 248.101784][T13143] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3368'. [ 248.110783][T13143] netlink: 'syz.5.3368': attribute type 30 has an invalid length. [ 248.127198][T13145] random: crng reseeded on system resumption [ 248.194281][T13155] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 248.201212][T13158] random: crng reseeded on system resumption [ 248.371851][T13162] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 248.520469][T13168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3373'. [ 248.614530][T13173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3378'. [ 248.623513][T13173] netlink: 'syz.0.3378': attribute type 30 has an invalid length. [ 248.736456][ T57] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.757349][ T57] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.766119][ T57] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.771897][T13174] loop1: detected capacity change from 0 to 2048 [ 248.781231][ T57] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.891801][T13174] Alternate GPT is invalid, using primary GPT. [ 248.898179][T13174] loop1: p2 p3 p7 [ 248.950701][T13165] Set syz1 is full, maxelem 65536 reached [ 249.137130][T13192] netlink: 'syz.5.3386': attribute type 2 has an invalid length. [ 249.144921][T13192] netlink: 'syz.5.3386': attribute type 1 has an invalid length. [ 249.152682][T13192] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3386'. [ 249.201113][T13195] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 249.235382][T13201] loop3: detected capacity change from 0 to 1024 [ 249.247440][T13201] EXT4-fs: Ignoring removed orlov option [ 249.265267][T13201] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 249.319955][T13216] netlink: 'syz.1.3394': attribute type 13 has an invalid length. [ 249.328769][T13201] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.520752][T11412] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.571959][T13231] loop3: detected capacity change from 0 to 512 [ 249.597042][T13229] loop0: detected capacity change from 0 to 2048 [ 249.731096][T13229] Alternate GPT is invalid, using primary GPT. [ 249.737560][T13229] loop0: p2 p3 p7 [ 249.743755][T13222] Set syz1 is full, maxelem 65536 reached [ 249.992537][T13237] netlink: 'syz.1.3400': attribute type 2 has an invalid length. [ 250.000424][T13237] netlink: 'syz.1.3400': attribute type 1 has an invalid length. [ 250.008182][T13237] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3400'. [ 250.197143][T13248] loop6: detected capacity change from 0 to 1024 [ 250.211764][T13252] syz!: rxe_newlink: already configured on team_slave_0 [ 250.219573][T13248] EXT4-fs: Ignoring removed orlov option [ 250.225753][T13248] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 250.269329][T13248] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.363958][ T9122] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.459965][T13270] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 250.484878][T13273] netlink: 'syz.3.3413': attribute type 2 has an invalid length. [ 250.490292][ T29] kauditd_printk_skb: 1631 callbacks suppressed [ 250.490361][ T29] audit: type=1326 audit(1763644485.673:82165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.6.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c2ecf749 code=0x7ffc0000 [ 250.492642][T13273] netlink: 'syz.3.3413': attribute type 1 has an invalid length. [ 250.498832][ T29] audit: type=1326 audit(1763644485.673:82166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.6.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c2ecf749 code=0x7ffc0000 [ 250.498869][ T29] audit: type=1326 audit(1763644485.673:82167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.6.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c2ecf749 code=0x7ffc0000 [ 250.522508][T13273] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3413'. [ 250.586609][ T29] audit: type=1326 audit(1763644485.673:82168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.6.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c2ecf749 code=0x7ffc0000 [ 250.610229][ T29] audit: type=1326 audit(1763644485.673:82169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.6.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85c2ecf749 code=0x7ffc0000 [ 250.633787][ T29] audit: type=1326 audit(1763644485.673:82170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.6.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c2ecf749 code=0x7ffc0000 [ 250.657485][ T29] audit: type=1326 audit(1763644485.673:82171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.6.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c2ecf749 code=0x7ffc0000 [ 250.681256][ T29] audit: type=1326 audit(1763644485.683:82172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.6.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c2ecf749 code=0x7ffc0000 [ 250.704894][ T29] audit: type=1326 audit(1763644485.683:82173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.6.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f85c2ecf749 code=0x7ffc0000 [ 250.706723][T13280] random: crng reseeded on system resumption [ 250.728462][ T29] audit: type=1326 audit(1763644485.683:82174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13266 comm="syz.6.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c2ecf749 code=0x7ffc0000 [ 250.898589][T13295] netlink: 'syz.5.3420': attribute type 13 has an invalid length. [ 251.079966][T13313] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 251.387275][T13329] loop6: detected capacity change from 0 to 2048 [ 251.424251][T13329] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.448726][T13329] ext4 filesystem being mounted at /289/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.461686][T13329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.470414][T13329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.501786][T13329] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3433'. [ 251.516409][T13333] loop3: detected capacity change from 0 to 2048 [ 251.581150][T13327] Set syz1 is full, maxelem 65536 reached [ 251.603182][T13333] Alternate GPT is invalid, using primary GPT. [ 251.609516][T13333] loop3: p2 p3 p7 [ 251.657929][T13347] loop5: detected capacity change from 0 to 512 [ 252.193275][T13366] loop3: detected capacity change from 0 to 1024 [ 252.207147][T13366] ext2: Bad value for 'max_dir_size_kb' [ 252.226562][T13378] random: crng reseeded on system resumption [ 252.275820][ T9122] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.311435][T13388] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 252.320594][T13391] GPL: port 1(erspan0) entered blocking state [ 252.326991][T13391] GPL: port 1(erspan0) entered disabled state [ 252.336185][T13391] erspan0: entered allmulticast mode [ 252.345299][T13391] erspan0: entered promiscuous mode [ 252.353539][T13391] GPL: port 1(erspan0) entered blocking state [ 252.359857][T13391] GPL: port 1(erspan0) entered forwarding state [ 252.462643][T13397] syzkaller0: entered promiscuous mode [ 252.468244][T13397] syzkaller0: entered allmulticast mode [ 252.829809][T13417] random: crng reseeded on system resumption [ 252.857448][T13420] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3459'. [ 252.883080][T13419] loop3: detected capacity change from 0 to 2048 [ 252.903242][T13419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.915719][T13419] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.927663][T13419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.937043][T13419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.946520][T13419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3462'. [ 253.570390][T11412] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.985072][T13465] loop3: detected capacity change from 0 to 2048 [ 254.066890][T13462] Set syz1 is full, maxelem 65536 reached [ 254.079510][T13473] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3481'. [ 254.088454][T13473] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3481'. [ 254.099054][T13465] Alternate GPT is invalid, using primary GPT. [ 254.105587][T13465] loop3: p2 p3 p7 [ 254.266951][T13480] syzkaller0: entered promiscuous mode [ 254.272656][T13480] syzkaller0: entered allmulticast mode [ 254.433180][T13492] loop1: detected capacity change from 0 to 512 [ 255.631090][T13510] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 255.641130][T13520] loop3: detected capacity change from 0 to 2048 [ 255.740105][T13517] Set syz1 is full, maxelem 65536 reached [ 255.754403][T13520] Alternate GPT is invalid, using primary GPT. [ 255.756879][ T29] kauditd_printk_skb: 1435 callbacks suppressed [ 255.756891][ T29] audit: type=1326 audit(1763644490.953:83610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13530 comm="syz.1.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8e67f749 code=0x7ffc0000 [ 255.760782][T13520] loop3: p2 p3 p7 [ 255.780331][ T29] audit: type=1326 audit(1763644490.963:83611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13530 comm="syz.1.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8e67f749 code=0x7ffc0000 [ 255.817667][ T29] audit: type=1326 audit(1763644490.963:83612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13530 comm="syz.1.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8e67f749 code=0x7ffc0000 [ 255.841288][ T29] audit: type=1326 audit(1763644490.963:83613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13530 comm="syz.1.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8e67f749 code=0x7ffc0000 [ 255.864900][ T29] audit: type=1326 audit(1763644490.963:83614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13530 comm="syz.1.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a8e67f749 code=0x7ffc0000 [ 255.888530][ T29] audit: type=1326 audit(1763644490.963:83615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13530 comm="syz.1.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8e67f749 code=0x7ffc0000 [ 255.912163][ T29] audit: type=1326 audit(1763644490.963:83616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13530 comm="syz.1.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8e67f749 code=0x7ffc0000 [ 255.935715][ T29] audit: type=1326 audit(1763644490.963:83617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13530 comm="syz.1.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8e67f749 code=0x7ffc0000 [ 255.959251][ T29] audit: type=1326 audit(1763644490.963:83618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13530 comm="syz.1.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4a8e67f749 code=0x7ffc0000 [ 255.982755][ T29] audit: type=1326 audit(1763644490.963:83619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13530 comm="syz.1.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8e67f749 code=0x7ffc0000 [ 256.158460][T13544] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3504'. [ 256.167367][T13544] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3504'. [ 256.418798][T13552] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 256.631493][T13572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3515'. [ 256.678567][T13580] netlink: 'syz.3.3519': attribute type 2 has an invalid length. [ 256.686336][T13580] netlink: 'syz.3.3519': attribute type 1 has an invalid length. [ 256.694087][T13580] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3519'. [ 256.888634][T13595] loop3: detected capacity change from 0 to 1024 [ 256.895483][T13595] EXT4-fs: Ignoring removed orlov option [ 256.901507][T13595] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 256.920759][T13595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.948194][T11412] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.066455][T13613] loop5: detected capacity change from 0 to 1024 [ 257.073357][T13613] EXT4-fs: Ignoring removed orlov option [ 257.081025][T13613] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 257.100752][T13613] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.145212][ T5481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.177097][T13623] GPL: port 1(erspan0) entered disabled state [ 257.324531][T13630] loop6: detected capacity change from 0 to 1024 [ 257.331423][T13630] EXT4-fs: Ignoring removed orlov option [ 257.337593][T13630] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 257.571263][T13630] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.590010][T13635] syzkaller0: entered promiscuous mode [ 257.595496][T13635] syzkaller0: entered allmulticast mode [ 257.657412][ T9122] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.703624][T13639] loop6: detected capacity change from 0 to 512 [ 257.834878][T13648] loop1: detected capacity change from 0 to 1024 [ 257.841678][T13648] EXT4-fs: Ignoring removed orlov option [ 257.847749][T13648] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 258.141343][T13648] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.190092][ T3567] Bluetooth: hci0: command 0x1003 tx timeout [ 258.196188][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 258.264623][T10974] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.415447][T13660] __nla_validate_parse: 3 callbacks suppressed [ 258.415460][T13660] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 258.438998][T13671] syzkaller0: entered promiscuous mode [ 258.445768][T13671] syzkaller0: entered allmulticast mode [ 258.618347][T13689] loop0: detected capacity change from 0 to 128 [ 258.633501][T13689] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 258.645918][T13689] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 258.725365][T13695] loop6: detected capacity change from 0 to 1024 [ 258.732074][T13695] EXT4-fs: Ignoring removed orlov option [ 258.738504][T13695] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 258.738692][T12506] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 258.767223][T13695] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.816645][ T9122] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.840150][T13706] random: crng reseeded on system resumption [ 258.872793][T13713] loop1: detected capacity change from 0 to 512 [ 258.894135][T13709] loop6: detected capacity change from 0 to 2048 [ 258.909730][T13717] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 258.938450][T13709] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.950671][T13709] ext4 filesystem being mounted at /302/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.014425][T13709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.023132][T13709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.032413][T13709] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3563'. [ 259.086011][T13723] loop0: detected capacity change from 0 to 1024 [ 259.093094][T13723] ext2: Bad value for 'max_dir_size_kb' [ 259.318982][T13734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3569'. [ 259.452635][T13739] loop3: detected capacity change from 0 to 128 [ 259.468412][T13739] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 259.481600][T13739] ext4 filesystem being mounted at /156/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 259.613331][ T3447] Bluetooth: hci0: Frame reassembly failed (-84) [ 259.677845][T13752] syzkaller0: entered promiscuous mode [ 259.683426][T13752] syzkaller0: entered allmulticast mode [ 259.865810][T13767] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 260.037881][ T9122] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.246365][T13786] loop1: detected capacity change from 0 to 1024 [ 260.252972][T13786] ext2: Bad value for 'max_dir_size_kb' [ 260.306908][T11412] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 260.323138][T13789] loop3: detected capacity change from 0 to 512 [ 260.742078][T13794] syzkaller0: entered promiscuous mode [ 260.747643][T13794] syzkaller0: entered allmulticast mode [ 260.760252][ T29] kauditd_printk_skb: 2565 callbacks suppressed [ 260.760313][ T29] audit: type=1326 audit(1763644495.963:86185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13781 comm="syz.6.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f85c2ec65e7 code=0x7ffc0000 [ 260.810319][ T29] audit: type=1326 audit(1763644495.993:86186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13781 comm="syz.6.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f85c2f02005 code=0x7ffc0000 [ 260.833928][ T29] audit: type=1326 audit(1763644495.993:86187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13781 comm="syz.6.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f85c2e6b829 code=0x7ffc0000 [ 260.857387][ T29] audit: type=1326 audit(1763644495.993:86188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13781 comm="syz.6.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f85c2ec65e7 code=0x7ffc0000 [ 260.880864][ T29] audit: type=1326 audit(1763644495.993:86189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13781 comm="syz.6.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f85c2e6b829 code=0x7ffc0000 [ 260.904335][ T29] audit: type=1326 audit(1763644495.993:86190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13781 comm="syz.6.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f85c2ecf749 code=0x7ffc0000 [ 260.927926][ T29] audit: type=1326 audit(1763644496.003:86191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13781 comm="syz.6.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f85c2f02005 code=0x7ffc0000 [ 260.951514][ T29] audit: type=1326 audit(1763644496.003:86192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13781 comm="syz.6.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f85c2ec65e7 code=0x7ffc0000 [ 260.974962][ T29] audit: type=1326 audit(1763644496.003:86193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13781 comm="syz.6.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f85c2e6b829 code=0x7ffc0000 [ 260.998458][ T29] audit: type=1326 audit(1763644496.003:86194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13781 comm="syz.6.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f85c2ecf749 code=0x7ffc0000 [ 261.084923][T13805] netlink: 'syz.1.3593': attribute type 2 has an invalid length. [ 261.092746][T13805] netlink: 'syz.1.3593': attribute type 1 has an invalid length. [ 261.100575][T13805] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3593'. [ 261.165217][T13813] loop1: detected capacity change from 0 to 1024 [ 261.171982][T13813] EXT4-fs: Ignoring removed orlov option [ 261.185893][T13813] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 261.219278][T13820] loop3: detected capacity change from 0 to 128 [ 261.234690][T13820] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 261.252022][T13813] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.267998][T13822] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3595'. [ 261.328053][T13820] ext4 filesystem being mounted at /158/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 261.442168][T10974] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.596419][T13827] netlink: 'syz.1.3600': attribute type 13 has an invalid length. [ 261.629489][ T3567] Bluetooth: hci0: command 0x1003 tx timeout [ 261.629500][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 261.894644][T13849] random: crng reseeded on system resumption [ 262.067489][T11412] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 262.086131][T13860] netlink: 'syz.3.3614': attribute type 13 has an invalid length. [ 262.170358][T13855] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 262.289480][T13871] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 262.297955][T13866] syzkaller0: entered promiscuous mode [ 262.303898][T13866] syzkaller0: entered allmulticast mode [ 262.485303][T13882] loop3: detected capacity change from 0 to 1024 [ 262.492089][T13882] EXT4-fs: Ignoring removed orlov option [ 262.498159][T13882] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 262.510564][T13882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.582235][T13880] syzkaller0: entered promiscuous mode [ 262.587948][T13880] syzkaller0: entered allmulticast mode [ 262.739258][T11412] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.435850][ T998] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.446170][ T998] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.463405][T13909] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3632'. [ 263.533343][ T998] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.543752][ T998] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.593642][ T998] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.603940][ T998] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.655354][T13905] chnl_net:caif_netlink_parms(): no params data found [ 263.667289][ T998] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.677662][ T998] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.722912][T13905] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.730038][T13905] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.737732][T13905] bridge_slave_0: entered allmulticast mode [ 263.744652][T13905] bridge_slave_0: entered promiscuous mode [ 263.752402][T13905] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.759508][T13905] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.767422][T13905] bridge_slave_1: entered allmulticast mode [ 263.773956][T13905] bridge_slave_1: entered promiscuous mode [ 263.796839][ T998] erspan0: left allmulticast mode [ 263.801906][ T998] erspan0: left promiscuous mode [ 263.807007][ T998] GPL: port 1(erspan0) entered disabled state [ 263.950132][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 263.961361][ T998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.971330][ T998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.981365][ T998] bond0 (unregistering): Released all slaves [ 264.002803][T13905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.013406][T13905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.049998][T13905] team0: Port device team_slave_0 added [ 264.057314][T13905] team0: Port device team_slave_1 added [ 264.087540][ T998] hsr_slave_0: left promiscuous mode [ 264.094893][ T998] veth1_macvtap: left promiscuous mode [ 264.103051][T13953] netlink: 'syz.3.3646': attribute type 13 has an invalid length. [ 264.103236][ T998] veth0_macvtap: left promiscuous mode [ 264.116510][ T998] veth1_vlan: left promiscuous mode [ 264.122480][ T998] veth0_vlan: left promiscuous mode [ 264.171025][ T998] team0 (unregistering): Port device team_slave_1 removed [ 264.179996][ T998] team0 (unregistering): Port device team_slave_0 removed [ 264.211554][T13905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.218517][T13905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.244423][T13905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.256467][T13905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.263426][T13905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.289412][T13905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.343326][T13905] hsr_slave_0: entered promiscuous mode [ 264.349395][T13905] hsr_slave_1: entered promiscuous mode [ 264.485532][T13961] syzkaller0: entered promiscuous mode [ 264.491659][T13961] syzkaller0: entered allmulticast mode [ 264.687347][T13973] netlink: 'syz.6.3655': attribute type 2 has an invalid length. [ 264.695153][T13973] netlink: 'syz.6.3655': attribute type 1 has an invalid length. [ 264.702918][T13973] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3655'. [ 264.871494][T13905] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 264.881055][T13905] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 264.894775][T13905] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 264.903738][T13905] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 264.913819][T13977] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 264.925252][T13983] netlink: 'syz.1.3657': attribute type 13 has an invalid length. [ 265.015060][T13905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.034751][T13905] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.043964][ T998] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.051011][ T998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.067927][T13905] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 265.078348][T13905] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.091580][ T998] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.098665][ T998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.113289][T14000] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 265.187819][T13905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.268334][T14015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3661'. [ 265.599000][T13905] veth0_vlan: entered promiscuous mode [ 265.606536][T13905] veth1_vlan: entered promiscuous mode [ 265.621090][T13905] veth0_macvtap: entered promiscuous mode [ 265.628916][T13905] veth1_macvtap: entered promiscuous mode [ 265.639348][T13905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.650096][T13905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.660437][ T6868] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.669855][ T6868] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.680361][ T6868] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.693789][ T3447] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.722243][T14045] random: crng reseeded on system resumption [ 265.769620][ T29] kauditd_printk_skb: 1323 callbacks suppressed [ 265.769634][ T29] audit: type=1326 audit(1763644500.973:87518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14039 comm="syz.6.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f85c2f02005 code=0x7ffc0000 [ 265.801537][ T29] audit: type=1326 audit(1763644501.003:87519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14039 comm="syz.6.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f85c2ec65e7 code=0x7ffc0000 [ 265.825170][ T29] audit: type=1326 audit(1763644501.003:87520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14039 comm="syz.6.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f85c2e6b829 code=0x7ffc0000 [ 265.848638][ T29] audit: type=1326 audit(1763644501.003:87521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14039 comm="syz.6.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f85c2ecf749 code=0x7ffc0000 [ 265.872607][ T29] audit: type=1326 audit(1763644501.003:87522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14039 comm="syz.6.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f85c2f02005 code=0x7ffc0000 [ 265.896413][ T29] audit: type=1326 audit(1763644501.003:87523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14039 comm="syz.6.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f85c2ec65e7 code=0x7ffc0000 [ 265.919958][ T29] audit: type=1326 audit(1763644501.003:87524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14039 comm="syz.6.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f85c2e6b829 code=0x7ffc0000 [ 265.943492][ T29] audit: type=1326 audit(1763644501.003:87525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14039 comm="syz.6.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f85c2ecf749 code=0x7ffc0000 [ 265.967974][ T29] audit: type=1326 audit(1763644501.003:87526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14039 comm="syz.6.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f85c2f02005 code=0x7ffc0000 [ 265.991578][ T29] audit: type=1326 audit(1763644501.023:87527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14039 comm="syz.6.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f85c2f02005 code=0x7ffc0000 [ 266.058310][T14058] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3675'. [ 266.067250][T14058] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3675'. [ 266.097366][T14060] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 266.236807][T14067] netlink: 'syz.5.3679': attribute type 2 has an invalid length. [ 266.244601][T14067] netlink: 'syz.5.3679': attribute type 1 has an invalid length. [ 266.251134][T14069] random: crng reseeded on system resumption [ 266.252354][T14067] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3679'. [ 266.356062][T14077] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3683'. [ 266.387015][T14078] loop5: detected capacity change from 0 to 2048 [ 266.503756][T14078] Alternate GPT is invalid, using primary GPT. [ 266.510337][T14078] loop5: p2 p3 p7 [ 266.533107][T14075] Set syz1 is full, maxelem 65536 reached [ 266.575765][T14088] netlink: 'syz.0.3689': attribute type 13 has an invalid length. [ 266.759931][T14101] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 266.817277][T14099] syzkaller0: entered promiscuous mode [ 266.823757][T14099] syzkaller0: entered allmulticast mode [ 266.834025][T14110] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3698'. [ 267.537542][T14131] loop1: detected capacity change from 0 to 2048 [ 267.604056][T14131] Alternate GPT is invalid, using primary GPT. [ 267.606011][T14129] Set syz1 is full, maxelem 65536 reached [ 267.610429][T14131] loop1: p2 p3 p7 [ 267.652137][T14135] loop5: detected capacity change from 0 to 512 [ 267.711721][T14137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3709'. [ 267.738253][T14139] netlink: 'syz.0.3710': attribute type 2 has an invalid length. [ 267.746004][T14139] netlink: 'syz.0.3710': attribute type 1 has an invalid length. [ 267.758863][T14139] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 267.800344][T14139] tunl0: Caught tx_queue_len zero misconfig [ 267.944370][T14151] random: crng reseeded on system resumption [ 268.039898][T14145] syzkaller0: entered promiscuous mode [ 268.045538][T14145] syzkaller0: entered allmulticast mode [ 268.156837][T14158] loop3: detected capacity change from 0 to 128 [ 268.182766][T14158] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 268.232891][T14158] ext4 filesystem being mounted at /183/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 269.000868][T11412] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 269.037696][T14175] __nla_validate_parse: 2 callbacks suppressed [ 269.037708][T14175] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3722'. [ 269.061377][ T998] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.110520][T14183] random: crng reseeded on system resumption [ 269.124873][ T998] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.317898][ T998] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.590663][T14198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3729'. [ 269.699745][T14196] syzkaller0: entered promiscuous mode [ 269.705274][T14196] syzkaller0: entered allmulticast mode [ 269.762697][ T998] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.775520][T14200] ================================================================== [ 269.783599][T14200] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 269.790871][T14200] [ 269.793176][T14200] write to 0xffff888117f30f00 of 8 bytes by task 14199 on cpu 0: [ 269.800870][T14200] mas_wmb_replace+0x208/0xfa0 [ 269.805623][T14200] mas_wr_store_entry+0x13e3/0x2750 [ 269.810806][T14200] mas_store_prealloc+0x760/0xa90 [ 269.815813][T14200] vma_iter_store_new+0x1c5/0x200 [ 269.820824][T14200] vma_complete+0x125/0x580 [ 269.825308][T14200] __split_vma+0x591/0x650 [ 269.829711][T14200] vma_modify+0x21e/0xc80 [ 269.834022][T14200] vma_modify_flags+0x101/0x130 [ 269.838857][T14200] mprotect_fixup+0x2cc/0x570 [ 269.843519][T14200] do_mprotect_pkey+0x6d6/0x980 [ 269.848358][T14200] __x64_sys_mprotect+0x48/0x60 [ 269.853202][T14200] x64_sys_call+0x2752/0x3000 [ 269.857863][T14200] do_syscall_64+0xd2/0x200 [ 269.862352][T14200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.868227][T14200] [ 269.870533][T14200] read to 0xffff888117f30f00 of 8 bytes by task 14200 on cpu 1: [ 269.878139][T14200] mas_state_walk+0x119/0x650 [ 269.882797][T14200] mas_walk+0x60/0x150 [ 269.886854][T14200] lock_vma_under_rcu+0x95/0x170 [ 269.891782][T14200] do_user_addr_fault+0x233/0x1080 [ 269.896877][T14200] exc_page_fault+0x62/0xa0 [ 269.901373][T14200] asm_exc_page_fault+0x26/0x30 [ 269.906203][T14200] [ 269.908507][T14200] value changed: 0xffff88811a633f81 -> 0xffff888117f30f00 [ 269.915589][T14200] [ 269.917890][T14200] Reported by Kernel Concurrency Sanitizer on: [ 269.924023][T14200] CPU: 1 UID: 0 PID: 14200 Comm: syz.1.3730 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 269.935379][T14200] Tainted: [W]=WARN [ 269.939158][T14200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 269.949194][T14200] ================================================================== [ 270.046145][ T998] bridge_slave_1: left allmulticast mode [ 270.051917][ T998] bridge_slave_1: left promiscuous mode [ 270.057606][ T998] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.066094][ T998] bridge_slave_0: left allmulticast mode [ 270.071774][ T998] bridge_slave_0: left promiscuous mode [ 270.077468][ T998] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.160790][ T998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.170469][ T998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.179873][ T998] bond0 (unregistering): Released all slaves [ 270.210666][T14176] chnl_net:caif_netlink_parms(): no params data found [ 270.243025][T14176] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.250095][T14176] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.257178][T14176] bridge_slave_0: entered allmulticast mode [ 270.263706][T14176] bridge_slave_0: entered promiscuous mode [ 270.270275][T14176] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.277305][T14176] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.284593][T14176] bridge_slave_1: entered allmulticast mode [ 270.292201][T14176] bridge_slave_1: entered promiscuous mode [ 270.307802][ T998] hsr_slave_0: left promiscuous mode [ 270.314108][ T998] hsr_slave_1: left promiscuous mode [ 270.320293][ T998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.327717][ T998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.335157][ T998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.342544][ T998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.352455][ T998] veth1_macvtap: left promiscuous mode [ 270.357902][ T998] veth0_macvtap: left promiscuous mode [ 270.363557][ T998] veth1_vlan: left promiscuous mode [ 270.368779][ T998] veth0_vlan: left promiscuous mode [ 270.422224][ T998] team0 (unregistering): Port device team_slave_1 removed [ 270.433027][ T998] team0 (unregistering): Port device team_slave_0 removed [ 270.464364][T14176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.474652][T14176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.492675][T14176] team0: Port device team_slave_0 added [ 270.498959][T14176] team0: Port device team_slave_1 added [ 270.512598][T14176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.519570][T14176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.545486][T14176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.556706][T14176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.563673][T14176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.589571][T14176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.613388][T14176] hsr_slave_0: entered promiscuous mode [ 270.619317][T14176] hsr_slave_1: entered promiscuous mode [ 270.675877][T14176] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 270.686799][T14176] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 270.695155][T14176] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 270.703797][T14176] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 270.733361][T14176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.744142][T14176] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.753217][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.760269][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.772596][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.779711][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.831506][T14176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.912056][T14176] veth0_vlan: entered promiscuous mode [ 270.919278][T14176] veth1_vlan: entered promiscuous mode [ 270.930618][T14176] veth0_macvtap: entered promiscuous mode [ 270.940205][T14176] veth1_macvtap: entered promiscuous mode [ 270.949880][T14176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.959628][T14176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.969887][ T57] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.978633][ T57] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.987633][ T57] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.997845][ T57] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0